Posts

Showing posts with the label audit

Three Things to Consider when Setting Up Data Compliance

Image
This article seeks to highlight three items that we consider to be important when it comes to #data compliance. It is based on the work that we are doing to support organisations implement or strengthen data compliance systems.  1. Apply the age-old #compliance frameworks when implementing data compliance.  The framework is tried and tested and provides a useful implementation framework that covers: - policies and procedures (including code of conduct and #ethics ), - effective #communication (hotline), - training, - compliance office (outsourced or in-house), - #audit and monitoring, - consequence/accountability management, and - third party transactions. You will note that registration with the Office of the Data Protection Commissioner (ODPC) is not listed as an element on its own. Registration is a necessary but not sufficient aspect of compliance. In fact, we consider registration, particularly the declarations made in that process, as exposing  organisations ...